$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28011e1e-9d46-4d6d-a4a2-cad99b96817c.roa File: 28011e1e-9d46-4d6d-a4a2-cad99b96817c.roa (raw, json) Hash identifier: o9wSJVDlab1A0mVYzhXzodz3+ceIA3IHtks2iN89dqQ= Subject key identifier: 4F:B0:41:E0:2D:28:AA:86:72:6A:7A:03:14:E3:BB:78:F7:A9:6B:75 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 41D6F34D07D902EEA66527E0934A18F0FE983C71 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28011e1e-9d46-4d6d-a4a2-cad99b96817c.roa Signing time: Fri 16 Oct 2026 00:20:46 +0000 ROA not before: Fri 16 Oct 2026 00:20:46 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 24.223.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d6:f3:4d:07:d9:02:ee:a6:65:27:e0:93:4a:18:f0:fe:98:3c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 16 00:20:46 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=d446914d0e713d3eedc075dfd5b21ceaf2e7271098ec2cd5f6e10c93534955de, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:54:84:65:d8:16:54:5e:da:f2:35:a9:86:fd: 49:a3:08:bb:19:eb:61:78:e9:e0:90:39:b1:ad:86: f4:2e:28:43:26:08:47:f8:b1:6b:cc:09:f4:a7:65: 36:72:f3:d9:bd:92:d9:5d:61:f4:f6:c6:ed:d2:4d: 53:1f:1a:2e:89:0d:d9:f0:aa:d9:30:2d:ea:34:ec: 52:e0:96:8c:a1:df:c8:76:23:91:47:39:12:e2:61: b1:4f:a4:7c:60:fc:a5:60:3e:f9:3d:e8:ae:47:e3: 22:a3:46:0f:ec:96:bb:4b:2e:60:34:e6:e6:1e:e6: e6:68:eb:22:67:33:f0:a0:d4:1f:ec:0a:48:66:8b: 58:50:63:f6:a6:d8:27:a2:98:e6:85:9b:e5:e4:45: 66:59:62:7b:78:7a:e4:df:54:dd:57:4b:be:b7:8e: 2e:9b:7e:c9:ae:d2:94:52:de:f1:05:e5:b6:39:0a: ab:75:2c:de:af:40:4f:17:0b:8f:9c:91:c6:6e:61: 34:fe:2b:c2:99:09:0c:7f:0e:04:c3:34:ed:54:b1: 49:4a:81:f0:2b:d7:b8:fd:bb:bb:a5:ca:ba:c1:f1: 1d:9d:73:6e:45:53:55:70:a1:73:e4:28:a7:82:49: 04:51:5d:09:05:fe:1c:07:d8:71:8b:d3:61:1a:b4: d7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B0:41:E0:2D:28:AA:86:72:6A:7A:03:14:E3:BB:78:F7:A9:6B:75 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28011e1e-9d46-4d6d-a4a2-cad99b96817c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.223.128.0/17 Signature Algorithm: sha256WithRSAEncryption b7:72:2c:cd:ca:11:85:70:45:1a:2c:42:e4:ba:bc:db:bc:2f: 35:e3:5b:68:a1:37:d5:d6:44:4b:2c:d9:b1:b2:51:34:6a:7d: 5c:c3:5a:46:ee:68:10:11:a7:b1:af:ba:dd:9d:be:f9:5e:2c: 48:88:64:64:b1:db:5b:52:c6:65:77:74:d3:da:8b:0c:19:10: c3:7e:4d:0f:4e:3b:e6:4c:d9:e4:25:de:78:2b:63:c5:98:17: be:0f:09:31:7a:ce:8a:46:b5:b4:49:50:a3:b2:d6:d5:87:1f: 99:31:db:6b:9a:e0:ec:26:65:d9:c2:fe:ea:bc:15:bf:f0:a5: bd:7f:77:9f:5a:a5:2f:6e:92:32:6f:90:13:26:16:9a:28:12: c6:07:24:11:fb:6e:c4:e7:09:fa:50:a3:65:99:a4:a4:34:13: b3:38:bf:67:83:6c:10:4f:3f:9e:a9:7c:9a:a9:fd:55:56:59: c0:45:e0:f8:69:5c:30:a5:d7:66:6d:41:6c:85:75:53:90:b0: 66:10:c0:24:68:3c:ea:e4:19:8e:7a:68:aa:61:27:fc:ad:d5: 90:9d:ba:84:ea:cd:b2:4c:97:12:8e:40:ce:01:7b:e9:52:35: 27:f0:8d:8a:a4:72:c6:1f:92:62:bf:69:b2:5f:82:f6:f7:0a: f7:a8:6c:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQdbzTQfZAu6mZSfgk0oY8P6YPHEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE2MDAyMDQ2WhcNMjcwMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDQ2OTE0ZDBlNzEzZDNlZWRjMDc1ZGZkNWIyMWNlYWYy ZTcyNzEwOThlYzJjZDVmNmUxMGM5MzUzNDk1NWRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0VIRl2BZUXtryNamG/UmjCLsZ62F46eCQObGthvQuKEMm CEf4sWvMCfSnZTZy89m9ktldYfT2xu3STVMfGi6JDdnwqtkwLeo07FLgloyh38h2 I5FHORLiYbFPpHxg/KVgPvk96K5H4yKjRg/slrtLLmA05uYe5uZo6yJnM/Cg1B/s Ckhmi1hQY/am2CeimOaFm+XkRWZZYnt4euTfVN1XS763ji6bfsmu0pRS3vEF5bY5 Cqt1LN6vQE8XC4+ckcZuYTT+K8KZCQx/DgTDNO1UsUlKgfAr17j9u7ulyrrB8R2d c25FU1VwoXPkKKeCSQRRXQkF/hwH2HGL02EatNf3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUT7BB4C0oqoZyanoDFOO7ePepa3UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4MDExZTFlLTlkNDYtNGQ2ZC1hNGEyLWNhZDk5Yjk2ODE3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcY34AwDQYJKoZIhvcNAQELBQADggEBALdyLM3KEYVwRRosQuS6vNu8LzXj W2ihN9XWREss2bGyUTRqfVzDWkbuaBARp7Gvut2dvvleLEiIZGSx21tSxmV3dNPa iwwZEMN+TQ9OO+ZM2eQl3ngrY8WYF74PCTF6zopGtbRJUKOy1tWHH5kx22ua4Owm ZdnC/uq8Fb/wpb1/d59apS9ukjJvkBMmFpooEsYHJBH7bsTnCfpQo2WZpKQ0E7M4 v2eDbBBPP56pfJqp/VVWWcBF4PhpXDCl12ZtQWyFdVOQsGYQwCRoPOrkGY56aKph J/yt1ZCduoTqzbJMlxKOQM4Be+lSNSfwjYqkcsYfkmK/abJfgvb3CveobDQ= -----END CERTIFICATE-----Generated at Sat Oct 31 01:05:05 2026 by rpki-client